---
id: CVE-2025-40053
title: 'net: dlink: handle copy_thresh allocation failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: dlink: handle copy_thresh allocation failure

  The driver did not handle failure of `netdev_alloc_skb_ip_align()`.
  If the allocation failed, dereferencing `skb->pro…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    84fd710a704f3d53d4120e452e86cea558cf73a8
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    5aa9b885602811a026a3f45c92ea2b4b04c54f09
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    9d49e4b14609e1a20d931e718962c4b6b5485174
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    ea87151df398d407a632c7bf63013290f01c5009
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    7ed5010fef0930f4322d620052edc854ef3ec41f
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    fd7b6b2c920d7fd370a612be416a904d6e1ebe55
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    8169a6011c5fecc6cb1c3654c541c567d3318de8
  - Linux 2.6.12
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-15T21:56:34.706462Z'
published: '2025-10-28'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:02:37.095Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-40053'
references:
  - url: 'https://git.kernel.org/stable/c/84fd710a704f3d53d4120e452e86cea558cf73a8'
  - url: 'https://git.kernel.org/stable/c/5aa9b885602811a026a3f45c92ea2b4b04c54f09'
  - url: 'https://git.kernel.org/stable/c/9d49e4b14609e1a20d931e718962c4b6b5485174'
  - url: 'https://git.kernel.org/stable/c/ea87151df398d407a632c7bf63013290f01c5009'
  - url: 'https://git.kernel.org/stable/c/7ed5010fef0930f4322d620052edc854ef3ec41f'
  - url: 'https://git.kernel.org/stable/c/fd7b6b2c920d7fd370a612be416a904d6e1ebe55'
  - url: 'https://git.kernel.org/stable/c/8169a6011c5fecc6cb1c3654c541c567d3318de8'
tags:
  - cve.org
epss: 0.00629
epssPercentile: 0.49921
ingestedAt: '2026-10-15T22:48:25.544Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: dlink: handle copy_thresh allocation failure

The driver did not handle failure of `netdev_alloc_skb_ip_align()`.
If the allocation failed, dereferencing `skb->protocol` could lead to
a NULL pointer dereference.

This patch tries to allocate `skb`. If the allocation fails, it falls
back to the normal path.

Tested-on: D-Link DGE-550T Rev-A3

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 84fd710a704f3d53d4120e452e86cea558cf73a8`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 5aa9b885602811a026a3f45c92ea2b4b04c54f09`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9d49e4b14609e1a20d931e718962c4b6b5485174`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ea87151df398d407a632c7bf63013290f01c5009`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 7ed5010fef0930f4322d620052edc854ef3ec41f`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < fd7b6b2c920d7fd370a612be416a904d6e1ebe55`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8169a6011c5fecc6cb1c3654c541c567d3318de8`
- `Linux 2.6.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.